Store client passwords in Secrets

Keep a client's logins, servers and keys with the client or project, with the real values hidden until someone reveals them.

Secrets live in the Secrets tab on client and project pages. Values in fields marked secret are encrypted before they're stored and never show in the list.

Add a secret

  1. 1

    Open a client or project page and go to the Secrets tab

  2. 2

    Click Add item and choose a type: Login, Server, API key, Secure note or Other

  3. 3

    Under Stored in, choose client level or project level, name the item and fill in the fields

  4. 4

    Tick Secret only on fields that must stay hidden, then click Add

Each type gives you a set of fields. You can add, remove or rename them later. Fields not marked secret show in the list and are searchable. Client-level items work across all of that client's projects and stay when a project closes.

Reveal and copy

Click Reveal on a secret field to see the value, or use copy to paste it somewhere. Every reveal is recorded, and the Last viewed column shows who looked and when.

Who can see them

  • By default only the workspace owner can see secrets. Admins can't either
  • Open them up for others in the Secrets area of a group's permissions. View only can reveal and copy. Can edit can also add, edit, delete and renew
  • Project-level secrets are only visible to people with access to that project

Expiry and renewal

Set an Expiry date, Renewal cost and Renew every on items that need renewing, like domains or hosting. You get an Inbox notification 30, 7 and 1 day before, on the expiry date, and once it has passed. The expiry date also shows in the calendar.

On the expiry date the item appears in the Needs attention table on the Overview page. After you renew with the provider, click Renewed. The expiry date moves forward one cycle from the old date, not from today. If no cycle is set, it counts as once a year.

Group permissions need Plus or above. Secrets removed with Delete permanently don't go to the trash and can't be restored. Workspace data exports don't include the real secret values.

Was this article helpful?

Next

Send documents by LINE and Telegram

Send invoices, proposals and contracts straight to a client's chat.

Keep reading